MAL-2025-105369 Malicious code in lsoiqi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d87798c0fbe9c3c624f08ef9dc030194626fce84315f2d84e82e4159aa9d5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed_pinniped_gold-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a2d47d9916e1a7873bdc152d0af4529da664ea39e75190e1a7637c146a88b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_locust_maroon-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfb8d45eac5f0a48e828a3965756d24280670446eeea6ccb5a31216f3ac2832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_barnacle_black-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b0ff7f20dd81daed05f6501d86e606e0542f677bfdb0cb5454b14788167b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba3c97a328223b8503c27b685def673b6e1d750baa3f3a39cba10592a0f1e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8ec3f5dc596786ae94acacfe7684ec3a02d54eeb126fff9be8803447b76470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101254 Malicious code in deep_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99d984c981fe043d52ac1bbaa6931e89736ff7b18f2ea5c16d3d63f39cb6442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111110 Malicious code in xenogeneic_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85618a42bec7b3eb58e517cd319a13be5ca5047003a4da98d4c292e137d2dc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted_moth_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab00c1c532f4808edff511da141f664629162f95d90f0abb84770d6570a937ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exceptional_xerinae_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd92a412d8c44f114150735ac92509c1a3817bc4876c524323adbb36a86af28a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99408 Malicious code in amused_wallaby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6256bfc25f366f2392b906a6863019a2699dbb8d1d9c12f2f141b6f2d017dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102861 Malicious code in formal_cod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeaa977bce224e930f2f1107dcaa897701c4999fa377374470400f2cee664708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105953 Malicious code in monetary_hamster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acdf94847059c5cfe0b30513b874f4050c33db591d24a5ffbf8b81efa8ef6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_otter_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffed006fc8d54b05ca808d3b1a4c5ef864abd054647768b4df4a16cabcb81afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious_antelope_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3af04803bb044ee00fd66f88d32544276d0c74cc24f273ff7d0d61d6512f75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superior_stork_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee2431e9995cd93b8c55616d1f2267275658fcdb60942f6899d80b23f5c2af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100195 Malicious code in burning_toucan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d4fb67a90ab71144e7142c509ef5e8fc911ec5c15eb8f00361033c1a255869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_jay_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6861f11528474a959642c7813c79d9bb33bcef66503481f7a836b6613e7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_dolphin_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567b99172f2f52cc57ce22d9266dda689a3ca3cce161abdec744e6b4a9a86f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba8640542d6a0bb96b9d322de307bce4bcfdf1257b71a9f961f7dc0d62b9ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...